Security Scan: 404 Not Found

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/502bd573-538f-4e66-8459-56c89afaa776 Domain and IP registration (RDAP)/api/v1/rdap/502bd573-538f-4e66-8459-56c89afaa776How often this domain was scanned/api/v1/domain/stats/alexistotojp12jt.cyou Scan history for this domain/api/v1/domain/history/alexistotojp12jt.cyou?limit=15

This website contacted 6 IPs in 1 country across 4 domains to perform 34 HTTP transactions. The main domain is alexistotojp12jt.cyou and was registered 6 months ago.

Submitted URL: https://alexistotojp12jt.cyou

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

ClickFix malware lure: fake Cloudflare verification tells Windows users to paste a Win+X Terminal command, on domain flagged as 'iclickfix' malware with critical EtherHiding exfiltration alerts.

Risk Factors (5)

Known malicious ClickFix kit (clickfix-winx-overlay-2026-10) served from the page

Multi-source content-malware threat-intelligence match on the primary domain (iclickfix/infostealer family)

Critical network IDS malware/exfiltration alerts (ET MALWARE EtherHiding Exfil M2)

Brand impersonation of Cloudflare's verification page on a non-Cloudflare domain

Domain is unranked in Cisco Umbrella and offers no legitimate content (nginx 404 at root)

Domain age information unavailable

Details

Page Title

404 Not Foundother network

Scan Type

public

Domain Name Analysis

The domain 'alexistotojp12jt.cyou' uses the .cyou top-level domain and has no subdomain. The core label 'alexistotojp12jt' covers 16 characters containing five vowels alongside 9 consonants; it also includes two digits. Breaking it apart gives 6 words: alexis, to, to, jp, 12, jt. Average segment length settles at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.95s

Total Load Time

60 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:56%

Script:Latin

Direction:ltr

Detection Details

Text Length:939 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software87% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

87%

documentation technical

67%

phishing scam

44%

government public service

37%

adult content

34%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
9	172.67.187.19Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	3.33.155.121Aws · CLOUD	United States	AS16509Amazon.com, Inc.
5	104.21.92.58Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	34.111.175.102Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
5	172.67.142.245Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	15.197.152.159Aws · CLOUD	United States	AS16509Amazon.com, Inc.
34	6	-	-